Privacy Policy

What this covers

Teleliner is a hosted control plane for Telegram accounts that you supply and control. This policy covers the website, the dashboard, and the Telegram bot used for balance top-ups and support.

Two kinds of data, two different roles

Almost everything below follows from one split, so it comes first. There is data about you, our customer - we decide how it is used, and we are answerable for it. And there is data your accounts collect about other people: messages read in the chats you choose to monitor, and the leads built from them. There, you decide what is collected and why; we hold and process it on your instruction.

In GDPR vocabulary: for your own account data we are the controller; for the chat content and leads your campaigns produce, you are the controller and we are the processor. The practical consequence is not paperwork - it is that having a lawful basis for monitoring a given chat, and for contacting a person who posted in it, is your decision and your responsibility. We give you the caps, the off switches and the delete buttons.

What we collect about you

• Account: your email address, a password hash (argon2id - the password itself is never stored), and whether you signed in with Google.
• Two-factor secrets, if you turn 2FA on.
• Billing: wallet balance, an append-only ledger of every top-up and charge, your plan and period, Telegram Stars charge identifiers, crypto invoice identifiers. We never see or store card numbers, because the service does not accept cards at all.
• What you configure: Telegram accounts (phone number, Telegram id, session material), proxies (host, port, credentials), campaigns and their instructions, channels and chats you point the product at.
• Technical: IP address, user agent, request and error logs, timestamps.

Telegram sessions and proxy credentials

Session strings, tdata archives and proxy passwords are encrypted at rest and used for exactly one purpose: operating your accounts as you instruct. They are not shared with anyone, and they are not used to run anything of ours. Export or delete an account and its session material goes with it.

The honest limit: a session string is, by construction, full access to the Telegram account it belongs to. Encryption protects it at rest. It cannot protect it from someone who can already reach your dashboard - so turn on two-factor authentication, and treat a shared dashboard login as a shared Telegram account.

Data your accounts collect about other people

Lead Radar reads messages in the chats you point it at, using your accounts and their own access. Each message is sent to our AI provider together with your campaign instruction to decide whether it matches. The verdict is stored as a stream event, and when it matches, as a lead carrying the sender's username, Telegram id and the message text.

Retention differs on purpose. Stream events - the raw log of everything seen - are pruned after 14 days. Leads are kept until you delete them: they are your working material, and expiring them on a timer would destroy work you paid for. You can delete any lead at any time, and deleting your workspace deletes all of them.

What goes to the AI provider

Message text, the chat title, and the campaign instruction you wrote - that is the whole payload for classification. For AI outreach, the draft reply and the conversation it belongs to. Your credentials, session material, proxy passwords and payment data are never sent to an AI provider.

Who else processes data

• DeepSeek - AI provider. Receives the text of messages classified by Lead Radar and the drafts of AI replies.
• apinet.cloud (embedding gateway) - embeddings for the source discovery catalogue.
• Google - sign-in, and only for accounts that choose Google.
• Telegram - the platform your accounts run on, and the processor of Stars payments.
• Crypto Pay (@CryptoBot) - crypto top-ups.
• Our transactional email provider - verification and password-reset mail.

How long we keep things

• Stream events (the radar's raw log): 14 days, then automatically deleted.
• Leads: until you delete them or delete your workspace.
• Account and configuration data: until you delete the account.
• Billing ledger: retained after account deletion for as long as accounting and tax rules require. It is append-only by design - that is what makes it trustworthy for both sides.
• Server logs: short-lived, kept for debugging and abuse investigation.

Your rights

You can ask for a copy of your data, correct it, export it, or have it deleted. Telegram accounts and their sessions can be exported from the dashboard at any time without asking us. For anything else, write to support@teleliner.com or reach us on Telegram; we answer within 30 days.

If a person whose messages your campaigns collected contacts us directly, we will point them to you - you are the controller of that data, and only you know why it was collected. We will help you act on the request.

Security

• Secrets (session material, proxy passwords) are encrypted at rest.
• Each workspace is isolated at the database level by row-level security, not by application code alone.
• Passwords are hashed with argon2id; sessions use short-lived tokens with rotating refresh.
• Two-factor authentication is available and strongly recommended.

No system is perfect and we will not pretend otherwise. If you believe you have found a vulnerability, tell us before telling anyone else and we will work with you.

Cookies and counters

The dashboard sets what it needs to keep you signed in. If site analytics are enabled, they are cookieless and aggregate - visit counts, not people. There are no advertising cookies and no cross-site tracking.

Age

The service is for adults. Do not use it if you are under 18.

Changes

The effective date at the top of this page changes whenever the text does. If a change materially affects what we do with your data, we will say so in the dashboard rather than rely on you re-reading this page.

Contact

Privacy questions, data requests and legal notices: support@teleliner.com. For anything faster, the support desk on Telegram is a live human.